Saitel DR & Saitel DP Remote Terminal Unit

An attacker with local access could inject commands into the RTU that execute with device privileges, potentially altering network control commands, disrupting data acquisition, or compromising the integrity of distribution and transmission network operations.

Energy utilities operating Schneider Electric Saitel DR or Saitel DP Remote Terminal Units in distribution, transmission, and generation networks should assess this risk. These devices are also deployed in railway automation systems. The vulnerability requires local or direct interface access, limiting remote exposure but still posing risk in environments where maintenance staff or contractors have device access.

An attacker with local access to the RTU or the ability to send specially crafted input to an affected command interface could inject shell commands that execute on the device. These commands run with the privileges of the RTU process and could manipulate network control logic or disable monitoring functions.